3 ms·
There is also a longer paper (mentioned in the presentation) dealing with this issue from a specific point of view: http://files.cloudprivacy.net/ssl-mitm.pdf
by kennu 16y ago
There is also a longer paper (mentioned in the presentation) dealing with this issue from a specific point of view:
http://files.cloudprivacy.net/ssl-mitm.pdf http://files.cloudprivacy.net/ssl-mitm.pdf
Certified Lies: Detecting and Defeating Government
Interception Attacks Against SSL (Christopher Soghoian and Sid Stamm)
It makes it very clear how every trusted CA in the world currently has the power to circumvent the security of any https-protected website; by themselves or compelled by someone else.